$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OzFdh-JATx2gvdoaYwFyuEh_Pj0.roa File: OzFdh-JATx2gvdoaYwFyuEh_Pj0.roa (raw, json) Hash identifier: C0HD68bMU2DGvliSN/LdLJbrq+gp+kyU1MwrhmglHRk= Subject key identifier: 3B:31:5D:87:E2:40:4F:1D:A0:BD:DA:1A:63:01:72:B8:48:7F:3E:3D Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 1DEE Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OzFdh-JATx2gvdoaYwFyuEh_Pj0.roa Signing time: Fri 01 Sep 2023 10:15:28 +0000 ROA not before: Fri 01 Sep 2023 10:15:28 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 49.158.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 23:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7662 (0x1dee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Sep 1 10:15:28 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3B315D87E2404F1DA0BDDA1A630172B8487F3E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b7:58:b5:1c:e7:76:4f:7d:30:71:d5:e8:01: cb:6d:94:2d:e3:e2:a9:d7:c2:69:43:6d:57:51:0a: b1:1c:00:40:33:1c:02:0d:4c:4d:2a:0b:00:fd:dc: 4e:34:b1:c7:76:1f:71:fe:1b:e5:d7:04:0a:b2:1a: 84:51:85:44:b7:6e:5a:c2:38:a0:86:f1:9c:2e:d7: 52:05:ed:c2:22:b7:e6:56:4d:be:04:ad:ba:a1:0c: 6f:3f:3b:0d:33:5d:3d:6f:87:f7:b0:4b:93:9c:d5: 4a:cb:5d:65:ea:1a:f4:21:95:cd:63:aa:47:a8:94: 61:cf:9d:be:37:c7:1a:fc:d1:20:0a:19:75:60:04: a8:f7:6e:f2:52:b5:8b:7b:43:15:c1:85:a3:e7:bd: 38:c4:d6:1f:ec:9f:c4:96:b3:65:4f:07:9b:e7:a0: cc:68:ea:82:49:a0:ac:bf:f6:c7:75:8e:73:51:94: 51:0f:94:1b:b9:ca:e5:60:a9:35:c5:d8:f7:fd:17: 91:2d:76:64:f0:16:5c:13:17:41:93:1d:ed:33:40: d1:b2:b6:c3:e8:ec:2b:e9:27:02:ca:d5:9e:1d:31: 9b:8f:8a:a7:4a:04:eb:ea:c9:e2:1b:bf:75:96:bb: d8:32:c1:2e:88:de:c6:47:dc:be:e0:55:dd:8e:3c: 14:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:31:5D:87:E2:40:4F:1D:A0:BD:DA:1A:63:01:72:B8:48:7F:3E:3D X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OzFdh-JATx2gvdoaYwFyuEh_Pj0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.158.192.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:ee:79:1a:67:40:4f:1f:96:ce:20:10:67:ce:95:00:bc:8d: 87:41:1f:d4:51:2e:76:3b:ba:ce:44:60:ad:bd:d1:91:bc:6d: bb:45:17:c1:a5:4c:05:ee:be:e9:98:d4:d3:03:99:86:3c:a3: c7:2d:f5:c5:3d:88:69:28:f4:e5:47:fe:aa:c7:0c:0c:18:cd: ad:c8:02:34:46:17:a3:ab:a4:26:fa:09:cf:4c:bb:c3:32:a0: 33:8f:d6:67:1d:1e:f3:78:7b:19:e6:d1:32:73:a6:4d:f5:69: e1:58:2c:37:2d:83:02:2f:04:00:79:ae:5a:b1:c7:b1:1f:52: a9:72:2e:0b:69:ac:01:d1:fd:38:8d:de:1c:1c:26:a9:01:e4: e2:f1:07:04:21:b5:0a:12:58:70:aa:1c:7f:ed:33:1f:dc:d3: 08:a6:0d:01:23:31:5f:de:56:2f:8c:95:08:e5:59:0c:37:bd: 63:c4:1b:bf:bd:5a:a1:5d:65:e9:e2:b4:d6:0f:93:ba:89:8f: ff:38:b9:e5:11:69:6e:68:64:b6:0f:39:fd:e3:d7:a1:91:a2: 68:71:4f:fa:c0:1a:cc:48:26:94:07:2b:33:fe:b8:b1:28:eb: 08:b6:7b:8c:ed:15:ac:71:1a:a3:10:a5:e7:76:89:b1:ee:5e: e0:a5:57:bf -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICHe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMzA5MDEx MDE1MjhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNCMzE1RDg3RTI0MDRG MURBMEJEREExQTYzMDE3MkI4NDg3RjNFM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD3t1i1HOd2T30wcdXoActtlC3j4qnXwmlDbVdRCrEcAEAzHAIN TE0qCwD93E40scd2H3H+G+XXBAqyGoRRhUS3blrCOKCG8Zwu11IF7cIit+ZWTb4E rbqhDG8/Ow0zXT1vh/ewS5Oc1UrLXWXqGvQhlc1jqkeolGHPnb43xxr80SAKGXVg BKj3bvJStYt7QxXBhaPnvTjE1h/sn8SWs2VPB5vnoMxo6oJJoKy/9sd1jnNRlFEP lBu5yuVgqTXF2Pf9F5EtdmTwFlwTF0GTHe0zQNGytsPo7CvpJwLK1Z4dMZuPiqdK BOvqyeIbv3WWu9gywS6I3sZH3L7gVd2OPBQbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOzFdh+JATx2gvdoaYwFyuEh/Pj0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL096RmRoLUpBVHgyZ3Zkb2FZ d0Z5dUVoX1BqMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx nsAwDQYJKoZIhvcNAQELBQADggEBAJ7ueRpnQE8fls4gEGfOlQC8jYdBH9RRLnY7 us5EYK290ZG8bbtFF8GlTAXuvumY1NMDmYY8o8ct9cU9iGko9OVH/qrHDAwYza3I AjRGF6OrpCb6Cc9Mu8MyoDOP1mcdHvN4exnm0TJzpk31aeFYLDctgwIvBAB5rlqx x7EfUqlyLgtprAHR/TiN3hwcJqkB5OLxBwQhtQoSWHCqHH/tMx/c0wimDQEjMV/e Vi+MlQjlWQw3vWPEG7+9WqFdZenitNYPk7qJj/84ueURaW5oZLYPOf3j16GRomhx T/rAGsxIJpQHKzP+uLEo6wi2e4ztFaxxGqMQped2ibHuXuClV78= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:07 2024 by rpki-client on console-fra.rpki-client.org